
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
File: QhQkhj78b5uyGjIfvVA2YeSoo_0.mft (raw, json)
Hash identifier: ef4mf5NkIAEA8Fc94F3S6kzrDlE2sdx+InioTC9Y2A8=
Subject key identifier: 6E:CE:C5:9A:D4:45:64:9D:71:23:72:73:A9:D3:0A:69:7B:33:54:5D
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Certificate issuer: /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
Manifest number: 2B
Signing time: Tue 19 May 2026 08:36:31 +0000
Manifest this update: Tue 19 May 2026 08:36:30 +0000
Manifest next update: Tue 26 May 2026 08:36:30 +0000
Files and hashes: 1: QhQkhj78b5uyGjIfvVA2YeSoo_0.crl (hash: 28f6wIwIPOiMh0tP6XXjwo6HtrxuHRkYj6SEOXShZHw=)
2: 7E43D97816DD11F18A14954A343D8C67.roa (hash: GHvsDod4B4M4Fvy4vn3Fb5pNbSRAj6hWau5NZwFd4IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Validity
Not Before: May 19 08:36:30 2026 GMT
Not After : May 26 08:36:30 2026 GMT
Subject: CN=6a0c210e-267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:11:c4:64:85:70:7b:6b:a5:68:1a:62:ba:
ea:77:49:bd:e8:82:0f:26:2f:a8:c7:cb:a2:0a:08:
3d:b3:ea:30:da:99:8f:0c:80:7d:84:63:89:80:5a:
3e:e8:e3:23:b8:07:4d:34:b2:0e:35:92:62:9e:b5:
25:99:88:88:90:92:cf:f3:b9:12:87:ec:72:f0:59:
66:a0:57:9d:3e:08:3e:71:14:47:53:47:63:b8:fb:
24:e7:13:4c:59:ac:12:48:35:14:8e:23:b2:c5:70:
44:58:7b:36:97:9a:59:a4:4c:82:b3:e4:e8:50:2d:
28:de:42:9f:0b:5c:ef:60:ee:90:8a:4c:02:58:44:
4e:7e:3d:5b:6e:38:2b:7c:7c:6c:ca:57:0b:ea:03:
d6:a3:29:80:fb:ee:14:d0:54:8a:e9:16:ca:a0:77:
81:d5:ad:ef:f5:8a:b0:da:ad:d7:5e:56:14:7b:d0:
7b:6a:ac:47:ec:17:c5:69:32:f2:c4:29:18:5b:a9:
ff:e5:70:2a:88:6a:37:bf:23:5d:7d:af:bd:c5:9f:
1a:86:91:58:eb:f3:8f:db:3a:74:b0:2d:55:a6:42:
fe:10:09:16:cb:a1:90:65:e0:2a:a2:9d:af:b8:ff:
93:84:d8:5a:dd:f6:66:fc:e8:23:1b:6f:05:1b:c2:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:C5:9A:D4:45:64:9D:71:23:72:73:A9:D3:0A:69:7B:33:54:5D
X509v3 Authority Key Identifier:
keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9d:39:77:6d:38:aa:8f:88:44:3c:9c:35:46:25:e8:20:d6:
6a:c4:18:be:94:53:ae:36:68:8b:20:7f:18:29:ce:fb:ce:37:
14:ab:a6:c0:15:e4:a6:48:86:21:a5:0a:e9:7f:0a:89:83:6f:
67:55:69:6a:2a:cf:ac:ac:39:fe:ce:5e:1e:f9:3e:65:d1:b4:
bf:79:73:47:46:fb:47:0d:c0:6b:63:89:2c:68:0f:02:5e:28:
4a:c3:88:38:ec:75:09:21:5c:08:b7:5f:54:77:d2:99:c5:c5:
1f:6d:0d:f1:c3:a1:82:dd:df:6a:53:68:76:aa:e9:eb:63:7b:
04:84:e8:46:77:d1:41:e2:e2:7b:bb:da:3b:71:b8:a2:5b:57:
5f:e8:22:e8:52:f2:01:86:d6:f7:a3:1d:08:9c:08:f2:bc:21:
0f:24:e4:63:4e:d2:fa:ee:4c:8d:f0:8a:b5:ac:85:a3:ee:66:
30:63:17:aa:ba:9e:f0:6f:17:cc:cd:9a:c5:f7:72:fa:28:f8:
1e:41:c7:5f:6e:68:b8:0c:6e:6e:1d:b5:d8:4c:e9:ee:f8:3e:
57:6e:80:21:e0:00:b3:4b:44:fd:36:b4:64:a0:00:92:63:52:
1b:20:71:69:7c:35:d6:32:b3:17:31:a8:50:21:ae:51:bf:51:
5d:5e:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:32 2026 by rpki-client